CN104917660A - VLAN (virtual local area network) service division network - Google Patents

VLAN (virtual local area network) service division network Download PDF

Info

Publication number
CN104917660A
CN104917660A CN201510352638.6A CN201510352638A CN104917660A CN 104917660 A CN104917660 A CN 104917660A CN 201510352638 A CN201510352638 A CN 201510352638A CN 104917660 A CN104917660 A CN 104917660A
Authority
CN
China
Prior art keywords
vlan
network
switch
terminal
access
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201510352638.6A
Other languages
Chinese (zh)
Inventor
马秋平
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Priority to CN201510352638.6A priority Critical patent/CN104917660A/en
Publication of CN104917660A publication Critical patent/CN104917660A/en
Priority to CN201610037092.XA priority patent/CN105610674A/en
Pending legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4641Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4604LAN interconnection over a backbone network, e.g. Internet, Frame Relay
    • H04L12/4616LAN interconnection over a LAN backbone
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00Data switching networks
    • H04L12/28Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46Interconnection of networks
    • H04L12/4604LAN interconnection over a backbone network, e.g. Internet, Frame Relay
    • H04L2012/4629LAN interconnection over a backbone network, e.g. Internet, Frame Relay using multilayer switching, e.g. layer 3 switching

Abstract

The invention relates to the field of internet technologies, and particularly relates to a VLAN (virtual local area network) service division network. The VLAN service division network comprises an Internet service VLAN network and an internal service VLAN network, wherein the Internet service VLAN network is connected to a VLAN access switch by an access terminal, the VLAN access switch is connected to a first core switch, the first core switch distributes a DHCP (dynamic host configuration protocol), and is routed to an outlet gateway and connected to the Internet; the internal service VLAN network is connected to the access switch through an internal access terminal, the access switch is connected to a convergence switch, the convergence switch is connected to a second core switch, the DHCP is distributed by the second core switch, and the second core switch is connected to a service server. According to the invention, DHCP addresses are distributed by the core switches, thereby ensuring the safety of service division and reasonable distribution of flow.

Description

VLAN traffic divides network
Technical field
The present invention relates to Internet technical field, be specifically related to a kind of VLAN traffic and divide network.
Background technology
Along with the development of internet information, the utilization of VLAN traffic is also original more extensive, in order to ensure the safety of business, in the terminal that the system access that Access Layer is different is different, ensures that the physical isolation of access side to obtain.Its division of existing VLAN traffic provides traffic identification and user to organize division by VLAN ID, but the conflict that still can cause service traffics to egress gateways between its security performance and user's group.
Summary of the invention
In order to solve the problems of the technologies described above, the invention provides a kind of VLAN traffic and dividing network, by the VLAN of business is ended in core switch, and distributing dhcp address by core switch, ensure the fail safe of delineation of activities and the reasonable distribution of flow.
In order to achieve the above object, the technical solution adopted in the present invention is, a kind of VLAN traffic divides network, comprise Internet service VLAN network and interior business vlan network, described Internet service VLAN network connects VLAN access switch by accessing terminal, VLAN access switch connects the first core switch, distributes DHCP by core switch, and routes to egress gateways and be connected to Internet the Internet; Described interior business vlan network to be accessed terminal connection access switch by inside, and access switch connects convergence switch, and convergence switch connects the second core switch, distributes DHCP by the second core switch, and core switch connects service server.
Further, access terminal described in and comprise wireless access terminal and access in radio terminal.
Further, described inside accesses terminal and comprises video conference terminal, IP phone, information release terminal, mobile office terminal and IPTV terminal.
Further, also comprise webmaster and AC controlled in wireless message VLAN, this webmaster and AC controlled in wireless message can be distributed on interior business vlan network, also can independently divide another vlan network.
The present invention is by adopting technique scheme, compared with prior art, tool has the following advantages: vlan network is divided into Internet service VLAN network and interior business vlan network by the present invention, VLAN ends in core switch, and carry out DHCP distribution by core switch, exchanging visit demand between different business, carries out three layers of route by core switch.Webmaster and AC controlled in wireless message can be distributed on inner VLAN, also can independently divide another VLAN.
Accompanying drawing explanation
Fig. 1 is the structural representation of embodiments of the invention.
Embodiment
Now the present invention is further described with embodiment by reference to the accompanying drawings.
As a specific embodiment, as shown in Figure 1, a kind of VLAN traffic divides network, comprise Internet service VLAN network and interior business vlan network, described Internet service VLAN network is by the 1 connection VLAN access switch 2 that accesses terminal, VLAN access switch 2 connects core switch 3, distributes DHCP by core switch 3, and routes to egress gateways 4 and be connected to Internet the Internet 5; Described interior business vlan network to be accessed terminal 6 connection access switch 7 by inside, and access switch 7 connects convergence switch 8, and convergence switch 8 connects core switch 9, distributes DHCP by core switch 9, and core switch 9 connects service server 10.
Core switch 3 and core switch 7 can be same exchange hardware or mutually redundant two exchange hardwares.
In the present embodiment, described in access terminal and comprise wireless access terminal and access in radio terminal.
In the present embodiment, described inside accesses terminal and comprises video conference terminal, IP phone, information release terminal, mobile office terminal and IPTV terminal.Described service server 10 comprises flow monitoring central server, media server and voice server.
In the present embodiment, also comprise webmaster and AC controlled in wireless message VLAN, this webmaster and AC controlled in wireless message can be distributed on interior business vlan network, also can independently divide another vlan network.
Although specifically show in conjunction with preferred embodiment and describe the present invention; but those skilled in the art should be understood that; not departing from the spirit and scope of the present invention that appended claims limits; can make a variety of changes the present invention in the form and details, be protection scope of the present invention.

Claims (5)

1. a VLAN traffic divides network, it is characterized in that: comprise Internet service VLAN network and interior business vlan network, described Internet service VLAN network connects VLAN access switch by accessing terminal, VLAN access switch connects the first core switch, distribute DHCP by core switch, and route to egress gateways and be connected to Internet the Internet; Described interior business vlan network to be accessed terminal connection access switch by inside, and access switch connects convergence switch, and convergence switch connects the second core switch, distributes DHCP by the second core switch, and core switch connects service server.
2. a kind of VLAN traffic according to claim 1 divides network, it is characterized in that: described in access terminal and comprise wireless access terminal and access in radio terminal.
3. a kind of VLAN traffic according to claim 1 divides network, it is characterized in that: described in access terminal and comprise wireless access terminal and access in radio terminal.
4. a kind of VLAN traffic according to claim 2 divides network, it is characterized in that: described inside accesses terminal and comprises video conference terminal, IP phone, information release terminal, mobile office terminal and IPTV terminal.
5. a kind of VLAN traffic according to claim 1 divides network, it is characterized in that: also comprise webmaster and AC controlled in wireless message VLAN, this webmaster and AC controlled in wireless message can be distributed on interior business vlan network, also can independently divide another vlan network.
CN201510352638.6A 2015-06-24 2015-06-24 VLAN (virtual local area network) service division network Pending CN104917660A (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
CN201510352638.6A CN104917660A (en) 2015-06-24 2015-06-24 VLAN (virtual local area network) service division network
CN201610037092.XA CN105610674A (en) 2015-06-24 2016-01-20 VLAN business dividing network

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510352638.6A CN104917660A (en) 2015-06-24 2015-06-24 VLAN (virtual local area network) service division network

Publications (1)

Publication Number Publication Date
CN104917660A true CN104917660A (en) 2015-09-16

Family

ID=54086387

Family Applications (2)

Application Number Title Priority Date Filing Date
CN201510352638.6A Pending CN104917660A (en) 2015-06-24 2015-06-24 VLAN (virtual local area network) service division network
CN201610037092.XA Pending CN105610674A (en) 2015-06-24 2016-01-20 VLAN business dividing network

Family Applications After (1)

Application Number Title Priority Date Filing Date
CN201610037092.XA Pending CN105610674A (en) 2015-06-24 2016-01-20 VLAN business dividing network

Country Status (1)

Country Link
CN (2) CN104917660A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105704421A (en) * 2016-03-16 2016-06-22 国网山东省电力公司信息通信公司 Video conference main and parallel session networking architecture and method
CN109101789A (en) * 2018-06-28 2018-12-28 中译语通科技股份有限公司 A kind of data safety control method
CN109547267A (en) * 2019-01-02 2019-03-29 京东方科技集团股份有限公司 LAN system and core layer, access-layer switch and its configuration method

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2007074209A (en) * 2005-09-06 2007-03-22 Ntt Data Corp Authentication vlan system, authentication server, and program
CN101035012B (en) * 2006-03-09 2011-06-22 上海博达数据通信有限公司 Ethernet multi-layer switcher secure protection method based on DHCP and IP
US8064458B2 (en) * 2009-06-23 2011-11-22 Nortel Networks Limited Method and apparatus for simulating IP multinetting
CN101841451B (en) * 2009-12-30 2013-01-02 北京世纪互联宽带数据中心有限公司 Virtual local area network-based speed limiting method and system for cloud hosts
CN202696647U (en) * 2012-04-06 2013-01-23 中国科学院上海应用物理研究所 Control system network architecture

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105704421A (en) * 2016-03-16 2016-06-22 国网山东省电力公司信息通信公司 Video conference main and parallel session networking architecture and method
CN105704421B (en) * 2016-03-16 2019-01-01 国网山东省电力公司信息通信公司 A kind of main sub-venue group network system of video conference and method
CN109101789A (en) * 2018-06-28 2018-12-28 中译语通科技股份有限公司 A kind of data safety control method
CN109547267A (en) * 2019-01-02 2019-03-29 京东方科技集团股份有限公司 LAN system and core layer, access-layer switch and its configuration method

Also Published As

Publication number Publication date
CN105610674A (en) 2016-05-25

Similar Documents

Publication Publication Date Title
CN102025591B (en) Method and system for implementing virtual private network
EP2590369B1 (en) Method and device for connecting to virtual private network across domains
CN109586972B (en) Access method and system of user terminal equipment and broadband network gateway
CN102801599A (en) Communication method and system
CN102025589A (en) Method and system for realizing virtual private network
EP2901630B1 (en) Method operating in a fixed access network and user equipments
CN104780088A (en) Service message transmission method and equipment
CN105453523A (en) Handling of virtual machine mobility in large data center
CN107666419B (en) Virtual broadband access method, controller and system
CN101841451A (en) Virtual local area network-based speed limiting method and system for cloud hosts
CN113852976A (en) Data processing method, controller and forwarding equipment
CN104917660A (en) VLAN (virtual local area network) service division network
CN109688241A (en) IPv4/IPv6 dual stack conversion method and system based on SDN
CN104734930B (en) Method and device for realizing access of Virtual Local Area Network (VLAN) to Variable Frequency (VF) network and Fiber Channel Frequency (FCF)
CN108234270B (en) Method and system for realizing multi-domain coexistence of virtual extensible local area network
CN102780701B (en) Access control method and equipment
CN113381936A (en) Network information processing method and device and network equipment
CN108011802B (en) Message sending method and two-layer and three-layer network equipment
CN102571592B (en) There is three-layer switching equipment and the data message forwarding method of port binding function
CN204669386U (en) VLAN traffic dividing system
CN105847143A (en) VRRP (virtual router redundancy protocol)-based load balancing method and system
CN103001890B (en) A kind of method for network access control
CN103582068A (en) Wireless accessing method and system
JP2014505387A (en) ID / locator separation network monitoring method and system
CN103095507B (en) Based on message transmitting method and the edge device of Ethernet virtualization internet network

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C02 Deemed withdrawal of patent application after publication (patent law 2001)
WD01 Invention patent application deemed withdrawn after publication

Application publication date: 20150916